How to enable or disable Protected Event Logging in Windows 11/10

If y'all want to enable or disable Protected Upshot Logging in Windows 11 and Windows 10, this step-past-step guide helps yous go through the process. However, y'all must include an Encryption certificate if you desire to enable Protected Event Logging in Windows 11/10.

For your information, yous tin turn this setting on or off with the help of the Local Group Policy Editor and Registry Editor. If you want to utilize the REGEDIT method, don't forget to backup Registry files first.

Enable or disable Protected Outcome Logging using Grouping Policy

To enable or disable Protected Issue Logging in Windows 11/10 using Grouping Policy, follow these steps:

1. Printing Win+R to open up the Run prompt.
2. Typemscand hit theEnter button.
3. Navigate toUpshot LogginginComputer Configuration.
4. Double-click on theEnable Protected Event Logging
5. Choose theEnabledchoice.
6. Enter the encryption certificate.
7. Click theOKpush button.

To learn more than well-nigh these steps, continue reading.

To get started, yous need to open the Local Group Policy Editor showtime. For that, printingWin+R to open the Run prompt, typegpedit.msc, and hit theEnterpush button.

In one case it is opened on your screen, navigate to the following path:

Computer Configuration > Authoritative Templates > Windows Components > Effect Logging

Here y'all can find a setting calledEnable Protected Event Logging on the correct-paw side. You need to double-click on this setting and cull theEnabledchoice.

Then, enter the encryption key in the respective box and click theOKpush button.

After that, your log data volition be encrypted. In case you want to disable or turn off Protected Event Logging in Windows 11/ten, you need to open the same setting in the Local Grouping Policy Editor and choose theDisabledorNon Configuredoption.

Read: Consequence Log Manager & Event Log Explorer software.

Turn on or off Protected Event Logging using Registry

To turn on or off Protected Event Logging in Windows 11/x using Registry, follow these steps:

1. Press Win+R to display the Run prompt.
2. Blazonregedit> printing theEnterbutton > click theYes
3. Navigate toWindowsinHKLM.
4. Right-click on Windows >New > Key.
5. Name it asEventLog.
6. Right-click on EventLog >New > Key.
7. Name it asProtectedEventLogging.
8. Right-click on ProtectedEventLogging >New > DWORD (32-bit) Value.
9. Set the proper noun asEnableProtectedEventLogging.
10. Double-click on it to set the Value information every bitane.
11. Right-click on ProtectedEventLogging >New > Multi-String Value.
12. Name it asEncryptionCertificate.
13. Double-click on it to enter the encryption document.
14. Click theOKbutton.
15. Reboot your computer.

Allow'southward cheque out these steps in detail.

At first, yous need to open the Registry Editor on your computer. For that, pressWin+R to display the Run dialog > type regedit > hitting theEnterbutton and click on the Yes option.

Once information technology is opened, navigate to the following path:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

Right-click onWindows > New > Key and name it asEventLog. Then, right-click on theEventLog primal > New > Primal and set the name asProtectedEventLogging.

Here you lot need to create ane REG_DWORD value and ane Multi-String Value. For that, right-click on theProtectedEventLogging key > New >REG_DWORD value and enter the name every bitEnableProtectedEventLogging.

Double-click on it to set the Value data every bitone and click theOKbutton.

Then, correct-click on the ProtectedEventLogging cardinal >New > Multi-String Value and set the proper noun every bitEncryptionCertificate.

Double-click on it to enter the encryption document.

Once done, click the OK push and reboot your figurer.

If you lot want to plough off Protected Issue Logging using Registry Editor, you demand to delete the REG_DWORD value and Multi-Cord Value.

TIP: Windows Event Viewer Plus is a portable freeware app that lets you view Event Logs faster than the default in-built Windows Event Viewer and also consign the Entry to a text file, select the Web Search Button to wait upwardly the entry online, to find out more information or troubleshoot errors.

How practice I protect Event Logs?

To protect Event Logs on your Windows xi/10 computer, you demand to follow the aforementioned guides. There are ii ways to practise that – using Local Grouping Policy Editor and Registry Editor. You tin follow either method one time you take the encryption central.

What are the five types of Event Logs?

For your information, at that place are five dissimilar types of Event Logs – Information, Error, Success Audit, Alert, and Failure Audit. You tin can encrypt all kinds of Event Logs with the help of the same tutorials. You can follow the REGEDIT or the GPEDIT method to get the chore done.

That's all! Hope this guide helped.

Read: How to clear the Result Log in Windows.

Source: https://www.thewindowsclub.com/enable-or-disable-protected-event-logging-in-windows

Posted by: moakwithet.blogspot.com

Share this post